Rezultati pretraživanja za 'Proizvođač: zhyd'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-60355 | 9.8 | zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates. | 2026-03-04 16:16:25 | 2025-10-28 18:15:38 |
| CVE-2025-56264 | 7.5 | The /api/comment endpoint in zhangyd-c OneBlog 2.3.9 contains a denial-of-service vulnerability. | 2025-09-23 16:44:37 | 2025-09-16 20:15:36 |
| CVE-2024-29473 | 6.1 | OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Role Management module. | 2025-04-01 16:57:59 | 2024-03-20 21:15:32 |
| CVE-2025-2835 | 4.0 | A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been declared as problematic. Affected by this vulnerability is the function autoLink of the file com/zyd/blog/controller/RestApiController.java. The manipulation leads to server-side | 2025-04-01 15:43:38 | 2025-03-27 04:15:25 |
| CVE-2025-2833 | 5.0 | A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been classified as problematic. Affected is an unknown function of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to inefficient regular exp | 2025-04-01 15:43:23 | 2025-03-27 04:15:23 |
| CVE-2024-54954 | 8.0 | OneBlog v2.3.6 was discovered to contain a template injection vulnerability via the template management department. | 2025-03-28 16:49:01 | 2025-02-10 18:15:29 |
| CVE-2024-29474 | 5.4 | OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Management module. | 2025-03-28 16:48:47 | 2024-03-20 21:15:32 |
| CVE-2024-29470 | 6.1 | OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component {{rootpath}}/links. | 2025-03-28 16:48:37 | 2024-03-20 21:15:32 |
| CVE-2024-29469 | 6.1 | A stored cross-site scripting (XSS) vulnerability in OneBlog v2.3.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category List parameter under the Lab module. | 2025-03-28 16:45:49 | 2024-03-20 21:15:32 |
| CVE-2024-29472 | 5.4 | OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Privilege Management module. | 2025-03-13 18:15:39 | 2024-03-20 21:15:32 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/2
Zapisa po stranici: